Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa
File: 3230302e39302e3134342e302f32312d3234203d3e203237383339.roa (raw, json)
Hash identifier: 3hNX5GXlOCNeIGCaCiJJe+SswW09/DtcKKN/8h9e3Fk=
Subject key identifier: 92:E7:92:23:38:84:66:DC:09:24:95:04:16:50:D1:63:75:1C:C3:F1
Certificate issuer: /CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Certificate serial: 0FAADD5916EFF5AA53FD2DA5031BE749BBDC2E43
Authority key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa
Signing time: Tue 04 Feb 2025 18:01:09 +0000
ROA not before: Tue 04 Feb 2025 17:56:09 +0000
ROA not after: Tue 03 Feb 2026 18:01:09 +0000
asID: 27839
IP address blocks: 200.90.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 14:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:aa:dd:59:16:ef:f5:aa:53:fd:2d:a5:03:1b:e7:49:bb:dc:2e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Validity
Not Before: Feb 4 17:56:09 2025 GMT
Not After : Feb 3 18:01:09 2026 GMT
Subject: CN=92E79223388466DC092495041650D163751CC3F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:f7:c3:0e:6b:c8:76:15:7e:18:4f:a3:47:
c3:bc:ac:2d:0d:ac:98:f1:4f:2e:30:46:fa:8f:4f:
c2:e5:66:26:dc:2f:b0:c7:6d:af:b4:07:9f:4b:79:
1a:d4:f2:f0:10:16:77:b6:e3:e2:e8:ee:b0:99:1a:
cb:7e:ca:74:aa:f1:33:7a:8a:54:68:cb:d0:0e:be:
5d:ed:46:7c:dd:9b:32:fd:ea:92:45:ad:3e:99:47:
29:83:fd:7e:9a:b9:1b:cc:e5:75:13:e7:53:fa:26:
fc:57:ff:23:8e:53:ff:90:2e:c7:0d:e1:05:99:dc:
cb:89:ef:a7:c1:c6:c3:18:81:9b:29:a8:5d:f5:eb:
a2:8f:ee:48:18:cc:68:d1:e8:c8:ed:34:d7:26:67:
87:67:79:af:f3:c1:0c:88:12:ed:1a:37:ea:99:66:
1a:34:70:d5:14:b4:88:11:19:c8:59:76:af:34:86:
63:8e:e6:41:57:55:c5:8c:b4:a1:53:2f:73:41:b5:
b6:0c:c9:97:e7:73:cc:04:c0:54:a9:d4:e8:4d:5e:
6a:9f:b5:fa:ec:34:9d:d8:5c:fc:92:99:c9:35:42:
f6:98:1a:f6:da:2a:90:a8:6d:dd:1b:74:94:14:00:
4b:a5:63:d1:28:75:5f:b6:99:62:95:4f:49:34:32:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E7:92:23:38:84:66:DC:09:24:95:04:16:50:D1:63:75:1C:C3:F1
X509v3 Authority Key Identifier:
keyid:EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.144.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:1f:5b:3f:c6:46:5b:50:6a:17:28:d2:4e:c7:35:44:f3:09:
a9:46:c7:b4:14:26:79:f4:1b:cf:a8:8f:bb:f7:5b:cc:c8:4b:
24:59:b8:ba:f6:50:91:a0:63:86:72:e8:0b:07:48:8c:f8:9e:
e3:ab:1c:aa:de:55:3d:0d:cf:62:ca:7c:0d:11:43:3a:f9:64:
dc:66:b7:9c:1d:1b:a1:d8:2b:de:c5:13:2c:7e:19:18:5e:e5:
71:80:cd:2c:5f:dd:db:d8:67:b2:43:f6:1d:e5:0c:52:38:a1:
c2:7f:08:02:2a:a4:24:12:1a:0b:49:a2:d6:2f:34:0e:73:7a:
02:40:db:ce:7a:49:1e:cd:77:98:41:c2:9f:bd:71:ad:df:d2:
6f:5c:76:4f:5d:8c:e8:0f:5e:74:6f:3e:26:25:9a:47:a7:10:
83:45:20:3c:7c:a1:28:eb:b1:9e:ac:d3:8d:24:67:21:c0:0e:
eb:23:fa:74:54:d6:9d:02:99:9b:fb:1b:1b:6b:08:68:50:0d:
f9:7c:03:fd:c9:23:11:15:dd:18:70:21:b1:f7:f9:62:3c:59:
42:cc:f9:12:f5:1f:92:51:3a:a0:11:f2:f4:6e:2e:20:53:ff:
26:86:ee:c2:f3:d4:25:8f:03:8e:79:eb:5f:1d:42:cb:c1:8a:
4f:db:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:15:53 2025 by rpki-client